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Threat Modeling 


The Internet is full of threats and security risks , and you can’t just deal with them when 
they appear , you have to be prepared to face them. 


you should learn about the security threats you are facing One of the most interesting 
things about threat modeling is that it operates from the perspective of the attacker. 
Giving fascinating insight into the mind of the adversary 


From this point the idea of ( Threats Modeling ) appears. 


Threat Modeling is a way of thinking about the sorts of protection you want for your 
data so you can decide which potential threats you are going to take seriously. It's 
impossible to protect against every kind of trick or adversary, so you should concentrate 
on which people might want your data, what they might want from it, and how they 
might get it. Coming up with a set of possible threats you plan to protect against is 
called threat modeling or assessing your risks. 


hat should the threat model contain! 


Threat modeling helps you think about programs and tools which you use to protect 
your privacy and security ,it also helps you understand why they fail to protect you. 
there are a lot of differences and methods when it comes to threat models,but there are 
some core components you need to have for it to qualify 
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Threat Modeling 
First, you have to clearly define what you want to protect ? this is a harder question 
than it looks and we will explore it in more depth shortly 


Second, identify the threat itself. What do you expect to happen‘ 


Third: How important is the thing you want to protect. How far will you go to protect 
it? What is the cost to protect it! 


Fourth: How much damage would you do if you failed to face the threats* 


Now we will look at each component in more detail 


hat do you want to protect? 


The threat model depends on things you want to protect, for example: If you have a 
video, image, data or project details, you should think first In the things you want to 
protect and what can be exposed to security threats. 


hat threat do you face! 


When it comes to threatening hacking or violating your privacy there are two types of 
attackers: 


The first type:- is a group of people looking for random targeting and not specifically 
targeting you like the developers of free VPN services or software developers that 
violate your privacy and collect your personal data or steal your bank card data or target 
you with ads and sell your information to third parties. 


Second type : attackers who want to hack you in particular, they consider as a different 
problems you can learn about the ways and methods they use in targeting you by 
reading the article How intelligence services track you 


Sf 
w . . . s 
$. Electronic Horizons Foundation | is an independent foundation aims to raise Security awareness among Muslims 


Q 9:5 a 


Threat Modeling 
How important is the thing you want to protect. How far will you go to protect it? What 
is the cost to protect itf 


The importance of the things that you want to protect as you support Mujaheddin is 
different from the things you want to protect as common Muslims.This particular 
component allows you to visualize if the object you want to protect from the security 
and intelligence services will require extraordinary measures to protect it not traditional 
ones, you may have to pay money to buy suitable electronic devices or equipment to 
protect these valuables things. 


hat is the cost of failure to face these threats 


Perhaps this question is absolutely the most important which will make you think about 
the damage that may occur if your protection is not enough, the answer of this question 
will also provide guidance for other questions. If the result of the damage is very 
disastrous, you will need to do more effort to prevent these disasters. 


For example, if you are a software developer and have designed a project to support the 
Mujaheddin 


you should assess the damage that will occur if you are arrested or if the project is 
hacked by vulnerabilities. 


When you answer these questions you can begin to formulate and evaluate solutions 
that suit your needs.but you should know that there is no way you can create 100% 
perfect protection, even if you have time, money and resources, there will always be 
weaknesses and gaps that can exploited but you benefit from applying exceptional. 


But the benefit from applying exceptional protection measures or appropriate to your 
needs is to reach the best level of security available and protection from the common 
attacks 
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